In this article

AD FS and banned IP addresses

06/28/2018

2 minutes to read

Contributors

In this article

Applies To: Windows Server 2016

In June 2018, AD FS on Windows Server 2016 introduced Banned IPs with the AD FS June 2018 update. This update enables you to configure a set of IP addresses globally in AD FS, so that requests coming from those IP addresses, or that have those IP addresses in the x-forwarded-for or x-ms-forwarded-client-ip headers, will be blocked by AD FS.

Adding banned IPs

To add banned IPs to the global list, use the below Powershell cmdlet: